mindwok

25 ms·

391.
by mindwok 4y ago
I think you should stop being so hard on yourself first. Reading this, to me you’re clearly someone with the capability to work in high pressure environments and deliver things under difficult circumstances. That’s a very rare and valuable
392.
by mindwok 4y ago
Software shipped by the distro maintainers I find is often properly locked down with systemd features, but third party stuff is always hit and miss. Definitely agree Tailscale should be shipping with the bare minimum privileges required.
393.
by mindwok 4y ago
This isn’t a poetry problem. Use pipenv for this. It’s pip but uses separate venvs to install packages. Pipenv install poetry will do exactly what you want I think.
394.
by mindwok 4y ago
It’s a great time to be a Python developer. Python seems to be settling in to a really nice sweet spot of accessibility and power, and with the upcoming performance improvements it’s got an even brighter future.
395.
by mindwok 4y ago
It can still be rootless by using systemd —-user which allows non privileged users to create units and such.
396.
by mindwok 4y ago
The main benefits touted are that Podman can run rootless containers and it doesn’t need a daemon compared to Docker. However those comparisons are less relevant now than they were a while ago because Docker can now run rootless containers
397.
by mindwok 4y ago
Not specific, but I have some friends who are involved in highly successful private equity firms. I was talking to one of them about the work and he was saying that one of the primary strategies large firms use is buying existing large comp
398.
by mindwok 4y ago
To be honest, your solution sounds far more hacky than a suid bit. A suid bit is effectively just a mechanism to implement privileged access in user space. I don’t see what’s hacky about that.
399.
by mindwok 4y ago
I view the implementation of SAfe anywhere as a huge red flag. To me it suggests that the decision makers read about Agile and what it proposes and decided that for whatever reason they don’t want it, in its unfettered form it scares them,
400.
by mindwok 4y ago
Authenticity is endearing. And if you’re mindful enough to try and overcome your shortcomings, you’re probably mindful enough to be a genuinely good person albeit with a few rough edges like the rest of us. You sound great!
401.
by mindwok 4y ago
I have used an internal DNS server, internal ACME server (smallstep which was already recommended), and liberal use of Caddy which makes using ACME insanely easy. I would highly commend it - you just put caddy on the front of everything, an
402.
by mindwok 4y ago
I was curious how this worked so I did some reading which I found interesting. In short, this uses ptrace, which is the same Linux kernel mechanism used by debuggers, to attach to a running process and manipulate the open file descriptors (
403.
by mindwok 4y ago
I think the other issue if we compare it to JS is the unfortunate reliance on C that python has. When Chrome came around, JavaScript was already standardised and there were many competing implementations which had to conform to ECMAScript a
404.
by mindwok 4y ago
C# support is excellent. They received funding from Microsoft to add it, and it’s nearly as full featured as the native GDScript and it’s significantly faster (at least in 3.X). Can’t really speak to the rest, although I believe occlusion c
405.
by mindwok 4y ago
It means that unprivileged users cannot see what other processes are running. Basically just prevents exposing information that might help an attacker, but it does break some tools that might rely on parsing /proc for system informatio
406.
by mindwok 4y ago
Yes. I like to know what you’re up to so I can understand what’s broadly going on in the team in case it’s interesting or if I can help you somehow.
407.
by mindwok 4y ago
True, at the end of the day there is still a huge amount of work to be done modelling the access your application needs. But I do think that can be conceptually simple, and all the horridness of the SELinux toolchain makes it far more scary
408.
by mindwok 4y ago
I disagree that the complexity is irreducible. SELinux really complicates things by having compiled policies that have their own tool chain, and (although this is definitely debatable) using file system labelling versus just paths (like App
409.
by mindwok 4y ago
Joe doesn’t need a filter. Maybe if he wanted to appeal to more people, he could use one. But he doesn’t really care about being controversial it seems. Let people make up their own minds I say, the same way you have.
410.
by mindwok 4y ago
My impression of the loneliness epidemic is that people only ‘choose’ to isolate once they have money and autonomy because it is easy, not because it is truly something they enjoy. At least that’s true for me. Organising things socially and
411.
by mindwok 4y ago
I don’t think you need to worry about that, those are completely different use-cases and markets. ARM CPUs will be available and widespread in other applications soon enough, and Linux support is already strong in that regard.
412.
by mindwok 4y ago
Second this. One of my favourite programming books. The advice is applicable to pretty much every domain of software engineering, and the lessons are philosophical (as the name suggests) rather than technical and specific, so they serve as
413.
by mindwok 4y ago
Two reasons I can think of: 1. C# in Godot is faster than GDScript. 2. The type safety features of C# are a bit more mature (and non-optional) for C#
414.
by mindwok 4y ago
I've been searching for this for a long time. Thank you!
415.
by mindwok 4y ago
Oh there you go, thanks I hadn't heard it in FOSS before.
416.
by mindwok 4y ago
I don't think this is common nomenclature outside crypto, but if I had to guess the distinguishing factor is that (according to their FAQ) they don't intend to merge upstream changes into the fork. So basically completely separate
417.
by mindwok 4y ago
Looking for specific traces like this is a difficult (but still worthwhile) way of detecting a breach, as there’s potentially infinite things a root user could do once they have that level of access. Another approach is focusing on detectin
418.
by mindwok 4y ago
Have a look at the GitHub repo, it’s very active and there are clearly some passionate people putting a lot of work into it. So it’s worth looking at the language again every now and then.
419.
by mindwok 4y ago
Does this really matter though? Is it any different to drug lord having a tonne of dirty cash they can’t use anywhere because all the useful places you could put it want nothing to do with you? Watching from the sidelines, the Crypto world
420.
by mindwok 4y ago
I think the specific scenario the author is talking about, ie a very large codebase providing some important infrastructure (Azure storage) with a relatively stable core is one where the costs of Rusts complexity start to be outweighed by t

More ›